$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa File: 3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa (raw, json) Hash identifier: dya9rS+oIJZLkM6/TrhHHiDuwauMCGerX4DJiLORbNc= Subject key identifier: 24:1F:23:D3:7E:17:D8:5E:89:BD:FC:D7:A5:B3:94:01:59:8F:20:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB0DA0A471A7068B6D8900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.37.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:0d:a0:a4:71:a7:06:8b:6d:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=879eaf67-980d-474c-a6e1-1aefa1ef2b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:bb:34:c5:b8:d9:60:19:b4:fa:dd:a7:4c: 54:d9:22:dd:5e:83:e0:e0:f2:e0:c6:bc:79:99:80: de:eb:92:27:9b:41:0f:db:a5:71:5b:4f:c0:c9:60: 53:b8:43:ba:25:25:48:c3:b5:3a:7d:98:ab:2a:fd: 62:bf:ec:a4:dd:fd:de:e8:fd:8d:de:b5:a2:8e:b4: e5:17:04:6e:59:11:4b:b9:61:69:96:a8:6d:34:85: b0:97:fb:35:bb:20:77:60:ac:0a:f5:9d:c4:21:74: 28:d8:4a:eb:85:f7:6b:b0:54:50:0d:75:e5:52:eb: 9e:21:22:ab:90:94:f1:54:b1:cd:ee:50:25:21:88: 49:f4:ee:2a:3c:45:ea:9f:fa:3e:4c:f7:af:3e:f9: ac:51:49:6a:8c:3a:fa:e5:cc:c5:69:69:01:2c:b3: 9b:e2:f7:db:9e:b0:f9:0b:51:9d:c6:98:92:3a:df: 55:ed:09:95:27:4a:05:3a:06:47:f5:90:70:d9:94: 42:24:26:70:04:6e:ed:6a:d6:22:6c:f6:83:04:15: 25:a9:2a:a1:83:a8:b8:7f:b6:eb:e1:dd:21:5f:2b: 59:83:81:88:13:c3:6a:3c:a3:d6:17:cc:5b:c4:90: 95:63:91:57:10:c2:ff:df:43:b5:ad:10:2b:14:00: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:23:D3:7E:17:D8:5E:89:BD:FC:D7:A5:B3:94:01:59:8F:20:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:38:f7:63:64:bc:02:c8:35:cf:24:38:7e:a3:c2:69:fe:4e: 00:0c:0b:c2:22:50:8c:ce:47:1c:81:11:d2:66:b5:74:10:e6: c0:fe:b4:f6:55:80:bf:1d:aa:c2:00:80:a2:ba:45:61:8c:10: 87:82:81:68:ab:ea:27:be:95:5a:e8:76:d8:ca:b9:87:38:ca: 63:d2:af:f7:b2:ea:41:2e:ff:b6:29:b4:c0:e8:f1:38:9b:d9: 4c:ff:18:3c:2e:b1:0e:0a:25:6f:dc:e3:a9:2e:c4:29:2f:a3: 04:1c:fb:b0:78:e8:4d:52:5c:e2:89:b1:a0:9e:ac:9f:26:f6: ff:a5:18:c1:43:be:9e:9c:ba:05:a7:88:c2:0f:b7:96:c0:5b: c4:af:7d:40:62:28:b7:16:1b:c1:0d:cc:96:a8:f8:34:ed:c5: 6b:94:a5:7d:19:32:3e:e2:89:26:d7:0b:61:79:72:fa:73:c5: f9:b6:e5:37:a0:ac:48:59:d7:9e:e1:b8:7f:0c:f4:91:d1:d1: 1f:b2:8b:94:b4:72:0b:ae:06:5f:6b:35:e5:2b:75:a7:8c:74: e9:d3:a5:a1:45:b1:0d:5c:13:25:65:ff:e8:00:d6:2a:c3:2d: 02:59:ac:d8:ee:ca:52:b3:9d:8f:59:24:f6:2e:f7:ff:b5:d9: e9:b4:27:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuw2gpHGnBottiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODc5ZWFmNjctOTgwZC00NzRjLWE2ZTEtMWFlZmExZWYyYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZS7NMW42WAZtPrdp0xU2SLdXoPg4PLgxrx5 mYDe65Inm0EP26VxW0/AyWBTuEO6JSVIw7U6fZirKv1iv+yk3f3e6P2N3rWijrTl FwRuWRFLuWFplqhtNIWwl/s1uyB3YKwK9Z3EIXQo2ErrhfdrsFRQDXXlUuueISKr kJTxVLHN7lAlIYhJ9O4qPEXqn/o+TPevPvmsUUlqjDr65czFaWkBLLOb4vfbnrD5 C1GdxpiSOt9V7QmVJ0oFOgZH9ZBw2ZRCJCZwBG7tatYibPaDBBUlqSqhg6i4f7br 4d0hXytZg4GIE8NqPKPWF8xbxJCVY5FXEML/30O1rRArFAC55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQfI9N+F9heib3816WzlAFZjyDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y0NGUyZmYtMmY3ZS0z ZjZkLTg2MDEtM2I5ODIzNjNmNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc492NkvALINc8kOH6jwmn+TgAMC8IiUIzORxyBEdJmtXQQ5sD+tPZV gL8dqsIAgKK6RWGMEIeCgWir6ie+lVrodtjKuYc4ymPSr/ey6kEu/7YptMDo8Tib 2Uz/GDwusQ4KJW/c46kuxCkvowQc+7B46E1SXOKJsaCerJ8m9v+lGMFDvp6cugWn iMIPt5bAW8SvfUBiKLcWG8ENzJao+DTtxWuUpX0ZMj7iiSbXC2F5cvpzxfm25Teg rEhZ157huH8M9JHR0R+yi5S0cguuBl9rNeUrdaeMdOnTpaFFsQ1cEyVl/+gA1irD LQJZrNjuylKznY9ZJPYu9/+12em0J48= -----END CERTIFICATE-----Generated at Fri Apr 17 07:33:51 2026 by rpki-client